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Introduction 

A large volume data distribution service has been mainly seen in the field of packaged media so far. However, 
due to the recent trends in the rapid popularization of mobile phones and the Internet as well as the realization of 
high-speed data transmission, a new type of information distribution service has gradually been emerged into the 
market as a large volume data distribution service through these cyber networks. And it is the music data 
content distribution service that is expected to grow in the future among the various large volume data distribution 
services on the Internet. However, in distributing a valuable content such as the music data on the Internet, it is 
crucial to establish the technologies to protect the content from illegal piracies and unauthorized distributions, 
which have emerged as one of the important social issues. 

The Keitaide-Music ("Music on Your Mobile") Technical Specification describes the technical specifications 
required to distribute the music data from the server to the storage media inserted in the mobile phone for 
recording and playback of the music data in a secure manner. 

The content protection technology is called UDAC-MB (Universal Distribution with Access Control - Media 
Base) which has made it possible to link the network content distribution, packaged media content distribution 
and the local distribution by means of the encrypted content copies. Based on this content protection technology, 
this specification stipulates various standards for such as memory card to store the content in a secure manner, the 
mobile phone terminal to download and playback the music and the protocols among each systems. 
Implementations conforming to this specification avail to strongly protect the content distributed through the 
mobile phone networks and/or the Internet and, hence, easily realize the new type of content distribution services 
through the networks. 

Though this specification mainly describes on the distribution of contents through the mobile phone terminals, its 
application may also be expanded and applied to other various types of network terminals, audio players and 
contents. 


♦ ‘Keitaide-Music’ is the trademark of FUJITSU LIMITED, Hitachi Ltd., NIPPON COLUMBIA CO., LTD., PFU 
Limited and SANYO Electric Co., Ltd. 

♦ ‘UDAC-MB’ is the trademark of FUJITSU LIMITED, Hitachi Ltd., NIPPON COLUMBIA CO., LTD., PFU 
Limited and SANYO Electric Co, Ltd. 
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Note : 

The technologies described in this specification may be related with patents, copyrights or other intellectual 
property rights possessed by the members of Keitaide-Music Consortium and other members. Nothing in this 
specification should be construed as granting permission to use any of the technologies described. Hence, it is 
required to obtain the permission of the holder of the intellectual property rights in advance to the actual use of 
the technologies contained in this specification. 

Keitaide-Music Consortium strongly encourages anyone implementing any part of this specification to determine 
first whether part(s) sought to be implemented are covered by the intellectual property of others, and, if so, to 
obtain appropriate licenses or other permission from the holder(s) of such intellectual property prior to 
implementation. 

The details of the Keitaide-Music Technical Specification are subject to change without notice. Neither 
Keitaide-Music Consortium nor any of its members accept any responsibility whatever for damages or liability, 
direct or consequential, which may result from the use of this specification. 
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1 Scope 

The Keitaide-Music ("Music on Your Mobile") Technical Specification conceptualizes the infrastructure to realize 
the system to purchase and download the digital data contents, such as music data, from the remote server system 
to mobile network terminals, such as mobile phones, and to directly playback the contents on the terminals. In 
this specification, a new service model is defined to realize the infrastructure for Keitaide-Music and the 
following specifications relating with systems developed to realize this service model and with the integrated 
systems as forms that the said systems are inter-connected are defined: 

1) The interfaces among the systems required to realize the Keitaide-Music infrastructure; 

2) Physical and logical implementation requirements for the content protection required of Keitaide-Music 
infrastructure. 

This specification specifically underlines the standardization of technologies to realize the content protection 
systems. This specification also assumes that the protocol, UDAC-MB (Universal Distribution with Access 
Control - Media Base) may be applied to various systems configurations including any media, playback system, 
network terminal, content and content distribution service. 

This part describes only the portion with the facilities extended for achieving the "Keitaide-Music system on the 
basis of " The MultiMediaCard System Specification Version 2.11 Official Release ". 

The current specification is supporting only SPI mode, but MMC mode will be supported in future. 
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2 References 

2.1 Specification of Keitaide-Music 
[Part 1] 

Part 1: Overview, Version 0. 9, January 2000, by Keitaide-Music Consortium 

[Part 2] 

Part 2: Security Guidelines, Version 0. 9, January 2000, by Keitaide-Music Consortium 
[Part 3] 

Part 3: Protocol, Version 0. 9, January 2000 by Keitaide-Music Consortium 
[Part 5] 

Part 5: Downloading and playback terminal, Version 0. 9, January 2000 by Keitaide-Music Consortium 


2.2 Other Specifications 

[X. 509] 

ITU-T Recommendation X. 509 (1997 E): Information Technology - Open Systems Interconnection - The 
Directory: Authentication Framework, June 1997. 

[MMC/2. 11] 

The MultiMediaCard System Specification Version 2. 11 Official Release © June 1999, MMCA Technical 
Commitee 

(Note) It is recommended to join MMCA (MultiMediaCard Association) to become a member and obtain the 
latest specifications from MMCA to learn the details of MultiMediaCard. 


CONFIDENTIAL 


DO NOT COPY ©Copyright 2000 by the 5 companies identified on page i, All rights reserved. _ 

- 4 - MultiMediaCard Application Note © June 2000 MMCA 




Keitaide-Music Technical Specification 


3 Definitions 

3.1 Definitions in [X. 509] 

The following terms used in this specification are defined in [X. 509]. In addition, this section shows the 
definitions and the usages of each terms in this specification. 

1) certificate 

2) certification authority 

3) certificate revocation list 

4) hash function 

3.2 Additional Definitions in this Specification 

In the present specification, following terms are newly defined. Description on the terms defined in the previous 
part will be omitted. 

3.2.1 Definitions in Part 1. 

1) Content ID 

2) Content Key 

3) Copy 

4) Data concatenation 

5) Decoder 

6) Decoder access condition 

7) Decoder class 

8) Decoder class certificate 

9) Decoder class private Key 

10) Decoder class public Key 

11) Encrypted license 

12) License 

13) License acquisition 

14) License ID 

15) License server 

16) Medium 

17) Media access condition 

18) Media class 

19) Media class certificate 

20) Media class private Key 

21) Media class public Key 

22) Media private Key 

23) Media public Key 

24) Move 

25) Public Key cryptosystem 
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26) Root private Key 

27) Root public Key 

28) MultiMediaCard with content protection 

29) Session Key 

30) Symmetric Key cryptosystem 

31) Tamper resistant module 

32) Transaction ID 

33) Universal distribution with access control 

34) Universal distribution with access control - media base) 


3.2.2 Definitions in Part 2 

1) Non-secure Area 

2) Secure Area 

3) Semi-secure Area 

3.2.3 Definitions in Part 3 

1) Log 

2) Suspend 

3) Transfer 


3.2.4 Definitions in this Part 

1) Dec_Reg Register used for processing inside the card. It shall be used for holding decryption results. 

2) Extended CSD Register newly implemented to notify the information which is native as MultiMediaCard 
with content protection to the host The length of Extended CSD is 16-bytes. 

3) License control area Area for storing the access control information included in the license inside the 
card. In addition to this, the area consists of content ID, transaction ID, and Invalid bit. 

4) Lic_Reg Register used for processing inside the card. It holds plain texts of decryption results, encrypted 
data, etc. 

5) License table Area where license is stored inside the card. When it is established in the semi-secure area, 
the license must be encrypted and stored. When it is established in the secure area, the license does not 
need to be encrypted. 

6) RND_Reg Register used for processing inside the card. It holds random number. 


CONFIDENTIAL 


DO NOT COPY ©Copyright 2000 by the 5 companies identified on page i, All rights reserved. _ 

- 6 - MultiMediaCard Application Note © June 2000 MMCA 




Keitaide-Music Technical Specification 


4 Abbreviations 


ACm 

Access Condition for media 

ACp 

Access Condition for player 

CA 

Certification Authority 

CRC 

Cyclic Redundancy Check 

CRL 

Certificate Revocation List 

DES 

Data Encryption Standard 

EC-DH 

Elliptic Curve Key Agreement Scheme, Diffie-Hellman 

EC-DSA 

Elliptic Curve Verification Primitive, DSA version 

ECC 

Error Correcting Code 

Ext-CSD 

Extended CSD 

SPI 

Serial Peripheral Interface 

T-DES 

Triple-DES 

TRM 

Tamper Resistant Module 

UDAC 

Universal Distribution with Access Control 

UDAC-MB 

Universal Distribution with Access Control - Media Base 

UML 

Unified Modeling Language 
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5 Conventions 


5.1 Expression of Keys 


See Section 5. 1, Part 1 of the present specification. 


5.2 Notations 


This specification uses the following notations throughout the sections. 


Table 5. 1 Notations used in this specification 


Name 


Description 


The result of encryption of information ‘D’ with a key ‘K’ 


The result of hash of information ‘D’ 


The result of concatenation of ‘A’ and ‘B’ 


A content encryption key associated with each content 


A private key securely protected by CA 


A public key corresponding to Ka 


The information relating to xx 


A certificate of a public key KPxx. 
KPxx II Ixx II E (Ka, H( KPxx II Ixx) ) 


A key that chips of the same media class (lot) typically 
keep inside of it secretly 


A public key corresponding to Kmcx 


A key possessed by each medium individually and secretly 


A public key corresponding to Kmx 


The access conditions that can be enforced in the medium 


A key that chips of the same decoder class (lot) typically 
keep inside of it secretly 


A public key corresponding to Kpcx 


The access conditions that can be enforced in the decoder 


A tentative key of symmetric key cryptosystem shared 
between the communication entities per each 
communication session. 


The date and time when CRL is renewed 


The value of an unique identifier allocated to each content 


The value of an identifier allocated for each transaction 


The unique result of concatenation of content ID and 
transaction ID 


A key of symmetric key cryptosystem that individual media 
use inside of its TRMs 


Encryption 


Hash 


Concatenation 


Content key 



Relevant information 


Certificate 


Media class private key 


Media class public key 


Medium private key 


Medium public kev 


Media access condition 


Decoder class private key 


Decoder class public key 


Decoder access condition 


Session key 


CRL renewed date 


Content ID 


Transaction ID 


License ID 


H(D) 


A II B 


Kc 


Ka 


KPa 


Ixx 


C (Ka, KPxx II Ixx) 


KPmcx 


Kmx 


KPmx 


ACm 



ContentID 


TransactionID 


LicenselD 


Individual 
symmetric kev 


medium Kx 
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6 Requirements 

The memory card defined in this specification shall satisfy the following requirements. 

(1) With the capabilities prescribed in the MultiMediaCard System Specification Version 2. 11 Official 
Release as a base. Consequently, the equipment side that uses this memory card should be in the 
environment in which the standard MultiMediaCard is able to be used (both electrical and physical 
specifications). 

(2) To be able to utilize the expanded encryption/decryption functions by using the card in the equipment that 
supports Keitaide-Music. 

(3) To have a secure area inside the memory card and be able to protect the secrete information against the 
attacks from the external. 

(4) To store the license which has decrypted with KPmx or is encrypted with Kx, when the license is stored in 
the semi-secure area to which an application-level access is prohibited, use the medium public key 
(KPmx) to store the license or use the individual medium symmetric key (Kx) to encrypt the license for 
storage. The whole area to store the license is designated to the secure area, any encryption need not to be 
used. 
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7 Features 

This card operates completely compatibly as a MultiMediaCard. After the power is turned on, the card operates in 
the MMC mode and after a specified procedure, it achieves functions for Keitaide-Music as capability expansion 
of the SPI mode. 

Differences from the standard MultiMediaCard can be summarized as follows: 

(1) By having the secure area, it protects the secretly hidden information inside the card from software and 
hardware attacks from the outside (key information, encoding function, etc.). 

(2) The card has extended-CSD that shows " MultiMediaCard with content protection" with security functions 
improved. 

(3) To have cipher processing functions in order to achieve functions such as "verification of the certificate, " 
"encryption, " "decryption, " etc. For this purpose, it is equipped with an additional command with 
capabilities expanded. This added command is implemented by CMD55 (Application Specific Command) 
function. 

(4) 6 additional pins are equipped for implementing high-speed write function to achieve writing byte by byte 
(high-speed version). 
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Fig. 7. 1 schematically shows the configuration of the card. 


TRM 


Multi 

Media 

Card 

Inter¬ 

face 


Flash Memory Control 




Fig. 7.1 Block diagram of configuration 


The card has a secure area, and thereby protects cipher processing circuit and various kinds of keys from software 
and hardware attacks. Flash Memory Control generally comprises a microprocessor for controlling the whole, 
cipher processing RAM, and ROM for storing the control program. Of these, the part concerning the encryption 
capabilities (part of RAM, ROM) must be located at TRM. For the TRM configuration, details are described in 
Part 2. 

Needless to say, the part directly related to the cipher functions of the interface circuits must be located in TRM in 
the same manner. 

The card has extended-CSD that shows 'MultiMediaCard with content protection". This may be located in any 
place in the above block diagram. 

The information on the geometry of card will be found in Chapter 14. 
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8 Secure Area 

The license control area and keys stored in the secure area shown in this chapter must be in the TRM. 


8.1 License Control Area 

This section shows the secure area related to license control (Fig. 8. 1). See Part 2 on TRM. 



Content!!) 

TransactionID 

ACm 

Invalid 

PlayCount 

Move Count 

Safe_Level 

0 







• 

: 

: 

: 

: 

: 

: 

N-l 








License control area 

N: number of licenses that can be stored is recorded inMAX_LICENSE field (upper limit value of license) of Ext-CSD. 


Fig. 8.1 Configuration of license control area 


This license control information is used for controlling license for playback and move (replication). 
See the following table. 


Table 8.1 Structure of license control 


Designation 

Meaning 

Length (B) 

ContentID 

Content ID 

16 

TransactionID 

Transaction ID 

12 


Play_Count 

playback enable frequency 

1 




OOh: playback disabled 





01-FEh: playback enable frequency 


ACm 



FFh: no limit to number of playbacks 



Move_Count 

Move and Copy control 

1 




OOh: license move and copy disabled 





01-FDh: Reserved (This function is the same as OOh) 





FEh: license move enabled 





FFh: license move and com enabled 



Safe. 

Level 

Reserved 

1 

Invalid 

OOh: valid, Olh: invalid (moved) 

1 
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8.2 Key Data 


The outline of the encryption key related data is shown. These must also be made into TRM. 

The keys which the card hold in are shown in Fig. 8. 2. List of keys data is shown in Table 8.2 and Table 8.3, 
respectively. 


Kmcx 


Kmx 


KPmx 


KPa 



RND Seed 

Log 

Ks2 

Tran.ID 

Status 


Fig. 8.2 Outline of key data 


Table 8.2 List of key-related information 


Designation 

Type 

Description 

Length (B) 

Kmcx: Note 3 

Public 

-system 

Medium class private key 

21 

Kmx 

Public 

-system 

Medium private key 

21 

KPmx 

Public 

-system 

Medium public key 

42 

KPa: Note 1 

Public 

-svstem 

Root public key 

42 

Kx: Note 2 

Symmetric 

-system 

Medium symmetric key 

14 

RND Seed 

Symmetric 

-svstem 

Seed for random number 

20 

Log 

Ks2 

Symmetric 

-system 

Session key 

14 

Tran.ID 

ID 

Transaction ID 

12 

Status 


Log valid-invalid, search results 

2 

H(CRL) 


Hash value of CRL 

20 


The public key consists of x coordinates and y coordinates and stored in the area (42 byte). The symmetric key is 
stored in the area (14 bytes) for two keys Triple DES. 

Table 8.3 Status Information 


Status (1 st . Byte) 

00h:OFF 

01h:ON 

Others: reserved 

Status (2 nd . Byte) 

00h:License has been moved. 

01h:Effective license exists. 

FFh: License does not exist. 


Note 1: KPa may be multiple. As a result, medium class certificates are multiple. 
Note 2: When the license is stored in the secure area, Kx may not be used. 

Note 3: Multiple Kmcx will be permitted 
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9 Semi-Secure Area 

The semi-secure area is an area for storing the license when the license itself is unable to be stored in the secure 
area. When the license is stored in the semi-secure area, the license must be encrypted with Kx or KPmx (the 
figure below shows the case when the license is encrypted with Kx). 

The license is stored in the semi-secure area by each particular size(ENTRY_SIZE). The WRITE_SECURE and 
the READ_SECURE commands that access the license have the number of the license as follows: 

Storage address of the nth license is BP+n * ENTRY_SIZE (bytes), (n = 0 to N-l) 

BP(Base_Point) and ENTRY_SIZE are not public. 

In the semi-secure area, media class certificate, CRL, etc. may be stored. When CRL is stored, the CRL hash 
value must be stored in the secure area in order to prevent counterfeit. 


Most 

Significant 
Address ^ 


Semi- 

Secure 

Area 


< 


Access 

Upper 

Limit 

Address 


V 


Least 

Significant 

Address 


Area not accessible by the command 

C(Ka, KPmexllImcx) Medium class certificate 


Note: KPa may be multiple. As a result, medium class certificates are multiple. 


CRT. 


BP+(N-1) 

* ENTRY SIZE 


(Nth license) 1 entry 


BP+2*ENTRY_SIZE 

BP+ENTRY SIZE 

BP 


License table 


(Second license) 1 entry 


(First license) 1 entry 


E(Kx, CountentID II TransactionID II ACm II Kc II ACp) 



Area accessible by a command 


Fig. 9. 1 Semi-secure area 
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10 Additional Commands 

10.1 Outline 

In order to add functions to the conventional MMC to realize the UDAC-MB, 

"Application Specific CMD" defined in MMC Ver. 2.11 is used. 

CMD55 APP_CMD, Arg. = OOOlh (RCA : Reserved : OOOOh) 

In the Ver. 2.11 MMC, Argument is not defined. This value is used in relation to Security System ID of Ext- 
CSD. 

In this specification, OOOlh is used as a value which indicates the expansion that supports Keitaide-Music. 

Only the command that follows right after this command is able to be defined for each application. 


Table 10.1 Command List 


Additional Command Mnemonics 

Command & Argument(*) 

SWITCH, mode = Oh/Fh 

CMD30, Arg. = (mode = Oh/Fh) 

SET_BLOCK_COUNT, cnt 

CMD30, Arg. = (cnt, mode = 8h) 

SEND_EXT_CSD, cnt 

CMD 17, Arg. = (cnt, type = Ah) 

ENCRYPT, cnt, type 

CMD17, Arg. = (cnt, type) 

GET_LOG, cnt, type = 8h/9h 

CMD 17, Arg. = (cnt, type = 8h/9h) 

READ_CERT, cnt, CERT_No. 

CMD 17, Arg. = (cnt, type = Bh, CERT_No.) 

WRITE SECURE, [n] 

CMD28, Arg. = (n) 

READ_SECURE, [n] 

CMD29, Arg. = (n) 

DECRYPT, cnt, type 

CMD24, Arg. = (cnt, type) 

CHECK_LOG, cnt 

CMD24, Arg. = (cnt, type = 8h) 

CHECK_CERT, cnt 

CMD24, Arg. = (cnt, type = 9h) 


(*) Execute APP_CMD (CMD55) right before these commands. 
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10.2 Additional Command Specifications 

The additional commands defined in this specification fall into two categories: one type to write the data from 
host to card and the other to read data from card. Some commands with the data block size which is greater than 
the specified one-block size, should be handled as follows. 

(1 Block = 512B: Write type command) 

(1) DECRYPT 

(2) CHECK_LOG 

(3) CHECK_CERT 

• Setting the number of transferred blocks to the cnt-field of the command. 

•In executing the commands, monitoring the busy signal sent by the card after the first block is transferred and 
when the busy signal is cleared, starting the transfer of the next block. 

•Continuing the above procedure while the data is rested. 

(1 Block = Designated by SET_BLOCKLEN command : Read type command) 

(1) SEND_EXT_CSD 

(2) ENCRYPT 

(3) GET_LOG 

(4) READ_CERT 

•Setting the number of transferred blocks to the cnt-field of the command. The block size is designated by 
SET_BLOCKLEN command. 

• (Total transfer size) = (block size) * (cnt-field) 

For example, total size is 512 byte. 

a) SET_BLOCKLEN command set 256B is 1 block. 

cnt = 2 

b) SET_BLOCKLEN command set 64B is 1 block. 

cnt = 8 

•In executing the commands, monitoring the data token sent by the card after the first block is transferred. The 
next block is followed by the data token. 

•Continuing the above procedure while the data is rested. 


In SWITCH, SET_BLOCK_COUNT, WRITE_SECURE and READ_SECURE, no data block is transferred. 
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mode = (4bit) 

mode = 0000 ; 1-bit serial transfer mode. This is the mode at the starting, 
mode = 1111 ; Expansion write mode (8-bit write mode). 


Note: mode = 1111 is only effective for the card supporting with the expansion write mode. 
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10.2.2 SET_BLOCK_COUNT 


SET_BLOCK_COUNT, cnt 


cnt = (16bit) 


Transferred block count. 


This command should be executed right before the command for transferring multi-block. 

The set value is effective only for this transfer. 

If any command is executed between multi-block transmission command (CMD24 (WRITE_BLOCK) 
or CMD17 (READ_SINGLE_BLOCK)) and SET_BLOCK_COUNT, its activity is not guaranteed. 
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SEND_EXT_CSD, cnt 

cnt = Transferred block count. The block size is designated by SET_BLOCKLEN command. 


The content of Extended CSD Register is read. This register size is 16 bytes. 
Extended CSD Register 


Description 

Designation 

Reserved 

- 

Security System ID 

Security System Version No. 
Number of storable licenses 

S_ID 

S_VER 

MAX_LICENSE 

Reserved 

- 

Extended Status (Reserved) 

EXT_STATUS(39:32) 

Extended Status(*) 

EXT_STATUS(31:18) 

Extended Status (Reserved) 

EXT_STATUS(17:16) 

Reserved 

- 



Security System ID S_ID 

The Security system ID is a unique ID assigned to the system to which the card is applied. 

Security System Version Number S_VER 

Security system version number is version nember uniquely decided by the company which has the S_ID. 
The version number-field is divided into following two parts. 

Higher-order 8 bit: card version; lower-order 8 bit: protocol version of the card. 

Number of storable licenses MAX_LICENSE 

The upper limit value of the number of licenses which can be stored in this card. 

(*) Details of Extended Status (1) 

Ext_Status(31): Decryption error 
Ext_Status(30): ECC incorrectable error 
Ext_Status(29): Defect error 
Ext_Status(28): Command sequence error 

Ext_Status(27): License access error (Invalid license access or invalid license number access) 
Ext_Status(26): Tag error (the written tag is illegal. ) 

Ext_Status(25): License error (playback disabled) 

Ext_Status(24): License error (move prohibited) 

Ext_Status(23): Verification error 

Ext_Status(22): Area for additional writing of CRL lacks. 

Ext_Status(21): CRL verification error (Verification failed at the time of CRL writing. ) 

Ext_Status(20): Specified certificate was prohibited by CRL. 

Ext_Status(19): Valid certificate specified by READ_CERT does not exist. 

Ext_Status(18): Specified type does not exist. 


Note: All bits of Ext_Status will be cleared by execution of this command. 
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Keitaide-Music Technical Specification 



GET_LOG, cnt, type 

cnt = Transferred block count. The block size is designated by SET_BLOCKLEN command. 


type = 8h 

Ks2 located in the log and status (Code is showing log search results and On/Off information) are encrypted 
using Ksl. This value is concatenated with Transaction ID (not encrypted). In addition, encrypted the Hash 
value of the above all information with Ks 1 is added. 

Statusl = Olh: On , OOh: Off 

Status2 = OOh : specified license has been moved. 

Olh : effective license exists. 

FFh : specified license does not exist. 

type = 9h 

Status l(first byte) and transactionID is sent. This command can be used in any sequence. 
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READ_CERT, cnt, CERT_No. 

cnt = TransfeiTed block count. The block size is designated by SET_BLOCKLEN command. 


CERT_No. indicates the number of the effective medium certificate C(Ka, KPmcxIllmcx). When the number 
of the certificate which is not existent is specified or no valid certificate exists when the command is entered, a 
meaningless value is returned as a data and Ext_Status(19) error bit is provided. 

Valid certificates in this card form a line from No. 0 to No. (n-1) . 

For example, there are n certificates. At first, third certificate was prohibited. 

Then new line of the certificates are shown blow. 

(At first) 

CERT_No. 0 1 2 3 4 - n-1 

Certificate in the card C(0) C( 1) C(2) C(3) C(4) — C(n-l) 


No. 3 certificate was prohibited. 


(After changed) 
CERT_No. 

Certificate in the card 


/ 3 4 - n-2 

3) C(4) C(5) - C(n-l) 
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The content stored in the license register is stored in the address specified by [n]. 

The invalid flag in the license control area is set to OOh. 

After these processings are normally completed, TransactioID in the Cont_reg is stored to the temporary log, 
and cleared the first status byte of the log to "Off. " 

If the specified number is not valid, Ext_Status (27) is set. 
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The content of the address specified by [n] is read out to the license register. 
ACm specified by [n] of the license control area is also read. 

If invalid = Olh, error termination (Ext_Staus(27)). 

This ACm is used in ENCRYPT, Type = 2 or 3. 

If the specified number is not valid, Ext_Status (27) is set. 

If the specified license does not exist, Ext_Status(27) is set. 
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CHECK_LOG, cnt 

cnt = Transferred block count. The block size is designated by SET_BLOCKLEN command. 


TransactionID are treated as write data. The length is multiple of 4096 bits (512B). 
If its size is smaller than 4096 bits, then 'O' added to the lower order. 


Received TransactionID is used for search-key. The license control area is searched with the keyword. 
The result is expressed in a 1-byte code. (Status2) 

OOh : specified license has been moved. 

Olh : effective license exists. 

FFh : specified license does not exist. 
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CHECK_CERT, cnt 

cnt = Transferred block count. The block size is designated by SET_BLOCKLEN command. 


(Processing is carried out in EC-DSA. ) 
C(Ka, KPxxxIlIxxx) is verified. 


If received data tag is wrong, Ext_Staus(26) is set. 

If all KPas in this card are prohibited by CRL, Ext_Status(23) is set. 

When zero divide occurs in the verification process, Ext_Status(31) is set. 

If the certificate is correctly verified, KPxxx is stored in the Decrypt register (3). 

If it is not correct, verification error (Ext_Status (23)) is set 

KPxxx : Public key to be verified. 

In this processing, there are KPpcx and KPmcx (counterpart's media class key) for KPxxx. 

Using the correctly verified KPxxx, CRL search is executed. 

If CRL has this certificate, subsequent processing is prohibited. (Ext_Status(20)). 
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10.3 Command Format 


SWITCH, mode 


Command 


0 

1 

0 

1 

1 

1 

1 

0 






1 byte 


VI 


1 byte 


V" 


1 byte 




OOOOh 


mode 


Res 


;rved(12bit) 


CRC 


Response (Rl) 


0 

p 

a 

e 

c 

i 

r 

s 


Reserved(12bit) = OOOh 


p: parameter error 
a: address error 
e : erase sequence error 
c : CRC error 
i: illegal command 
r : erase reset 
s : n idle state 


mode = Oh 
or Fh 



Command 


SET_BLOCK_COUNT,cnt 


0 

i 

0 

1 

1 

1 

1 

0 


1 byte 


VI 


1 byte 
_ 


V" 


1 byte 










W 

8h 

^ Res 

iived(12bil) w 

CRC 

1 


Response (Rl) 


0 

p 

a 

e 

c 

i 

r 

s 
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SEND EXT CSD.cnt 



Data In 



Command 



w 


Response (Rl) 


Data 

Out 


P 


Data Block 


CRC 


Timing 


ENCRYPT, cnt, type 



Data 

In 

Data 

Out 


Command 


► 




lesponse (Rl 





0 

p 

a 

e 

c 

i 

r 

s 


Data Block 

CRC 




w 


Timing 
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GET_LOG,cnt, type = 8h/9h 


Command 


0 

1 

0 

1 

0 

0 

0 

1 


1 byte 


1 byte 


1 byte 


-•- 



- A 

r — A 

l 

— \ 



type - 8/‘ 

^_ Res 

;rved(12bill w 

CRC 

1 

^ Clll( 1 

JUll) W 


w 




Data 

In 

Data 

Out 


Command 


0 

p 

a 

e 

c 

i 

r 

s 


Timing 


Data Block 


CRC 


READ_CERT, cnt, CERT_No. 
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WRITE_SECURE, [n] 


r nmmanrl 


0 

1 

0 

1 

1 

1 

0 

0 


3 





A 

n ^ 

CRC 


W 

^ Res 

irved w 


n w 



Data 

In 

Data 

Out 


Command 


Response (Rl) 


0 

p 

a 

e 

c 

i 

r 

s 

Busy 


Timing 


READ_SECURE,[n] 



Data 

In 

Data 

Out 


Command 


Res 

nonse (Rl) 






0 

p 

a 

e 

c 

i 

r 

s 

Busy 











w 


Timing 
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DECRYPT, cnt, type 



CHECK_LOG, cnt 




CHECK_CERT, cnt 
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11 Sequence Examples 

This section shows typical examples of processing concerning download, playback, move, etc. of license of the 
content. 

(1) Download/ Transfer Write: Download from the server and processing of the write-side card for move or 
copy. 

(2) Download retry: When interruption occurs in the midst of download and the download is resumed (when 
the fee is already charged). 

(3) Playback 

(4) Transfer Read: Processing of the read-out side card for move or copy. 

See Part 3 for the detail. 
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11.1 Download/Transfer Write 


Terminal 


Download / Transfer write procedure (1) Card 


READ_CERT ,CERT_No. 


R1 


C(Ka,KPmcxllImcx) 


DECRYPT,type = 0 


Trans act ion ID 11 E(KPmcx, Ks 1) 


R 1 h 


S ET_B LOC K_C OUNT, c n t = n 


R1 


WRITE_BLOCK, [Address] 


E(Kc,Content) 


R1 


ENCRYPT,type = 0 


R1 


E(Ksl,Ks2 II KPmx II CRLUpdate) 



Kmcx 


Kx 


Decryption 


Ksl 


Dec_Reg(3) 


Log 


Ks2 


Kmx 


KPmx 


KPa 


C(Ka,KPmcxllImcx) 


CRL 


TransactionID 


Off 


RAND:Ks2 


Encryption 


Ks2 < 


RND_Reg 


Log 


Ks2 


[Address] 

> 


E(Kc,Content) 


TransactionID 


On 
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Terminal 


CONTINUE 


Download / Transfer write procedure (2) Card 



DECRYPT, type = 1 


E(Ks2,E( KPmx, (ContentIDII 

TransactionIDIIACm)ll 

KcllACp)IICRL) 


Rib 


WRITE SECURE, [n] 


Rib 


Kmcx 


Kx 


Ks2 


RND_Reg 


Decryption ^ 


Decryption 4 


Cha 

nse 


Ver 

ify 


Decryption 


(ContentID IITransactionJ 
II ACm)IIKcllACp 




Kmx 


KPmx 


KPa 



f C(Ka,KPmcxllImcx) 




CRL 

w 



License table 

No. 

License 

0 


* 


N-l 

/ 


E( Kx, (ContentID 11 
TransactionIDI I ACm) I IKcl I ACp) 


Lic Reg 


License control area 


No. 


ContentID 


N-l 


Transa 


tionID 


Play Count Copy cou: it 


Log 


ACm 


Invalid 


V_ 3 l 

Ks2 

TransactionID 

Off 
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11.2 Download Retry Data 

Download Retry Data (1) 
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Download Retry Data (2) 


Card 
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11.3 Playback 


Terminal 


Playback procedure (1) 


Carrying out this operation in advance £ 
time of card insertion sets the host termi 
from checking the certificate and sharinj; 
the session key every time of music play > 


t the 
ii lal free 


CHECK CERT 


C(Ka,KPpcxllIpcx) 


R1 h 


ENCRYPT,type = 1 


R1 


E(KPpcx,Ks5) 


DECRYPT,type = 2 


E(Ks5,Ks6) 


Rib 


Kmcx 


Kx 


ack. 


Check Cert 


KPpcx 


Dec_Reg(3) 


RANI 

D:Ks5 

1 

r 

Encryption 


Ks5 


Card 


Decryption 



RND_Reg 


Ks6 


Dec_Reg(l) 
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Playback procedure (2) 


Card 


Terminal 


READ_SECURE, [n] 


R I 



ENCRYPT,type = 2 


R1 


E(Ks6,KcllACp) 


When playback license is unable to be 
released, error is returned. If it is able to 
be released, subtract one from Play_Count 
and store in the license table. 


_L 


SET_BLOCKLEN,length 


E(Kc,Content) 


Kmcx 


Kx 


Ks6 


Dec_Reg(l) 


E(Kx,(ContentID II 
TransactionID II ACm)ll 
KcllACp) 


Kmx 


KPmx 


KPa 


C(Ka,KPmcxllImcx) 


CRL 


License table 


<4 

R1 

-> 

SET BLOCK COUNT,cnt = n 


R1 





READ_SINGLE_BLOCK [ Address] 


4 - 

R1 

V 




If the invalid flag is Olh, 
then the process terminates 
by error. 


license control area 


n\. 

ContentID 

TransactionID 

\ ACm \ 

Invalid 

Play Opunt 

Copy count \ 

n ' 





\ 










-^ ^ 







N-1 







[Address] 


E(Kc, Content) 
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11.4 Transfer Read 


Transfer read nrocedure (1) 


Card 


Terminal 


KPmcy: Medium class key of 
counterpart's card, x —> y is expressed 
considering the case in which the 
medium class key differs from this. 


CHECK CERT 


C(Ka,KPmcyllImcy) 


Rib 


ENCRYPT,type = 1 


RJ 


E( KPmcy, Ks 1) 


SET_BLOCKLEN,length 


R1 


SET_BLOCK_COUNT,cnt = n 


R1 


RE AD_SINGLE_BLOCK [ Address] 


R1 


E(Kc,Content) 


DECRYPT,type = 3 


E(Ks 1 ,Ks2l I KPmy I ICRLUpdate) 


Rib 


CONTINUE 




► Decryption 4 


E(Kc, Content) 


C KPmcy: Medium specific key of 
counterpart's card, x—>y is 
expressed considering the case 
in which the medium class key 
differs from this. 


Ks2 II KPmy II CRLUpdate 



c_Reg(l)\ Dec_Reg(2) 


Log 


TransactionID 


On 
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Transfer read procedure (2) 


Terminal 


JONTINUE 



E(Ks2,E( Kpmcy,(ContentIDII 

TransactionIDIIACm)ll 

KcllACp)IICRL) 


In moving the license, first of all, confirm 
the ACm (Move_Count). 

OOh: Move and copy are prohibited, then 
error. 

FEh: Move is enable, invalid flag set to Olh. 
FFh: Move and copy are enable, invalid flag 
is held to 0. 

Olh-FDh: Reserved. Same as OOh manner. 


Dec_R.eg(l) 

Dec_Reg(2) 



READ_SECURE, [n] 

N, 


R1 




ENCRYPT,type = 3 


4- 

R1 

w 


Kmcx 


Kx 


KA? 


KPmcy 


E(Kx,(ContentID II 
TransactionID II ACm)ll 
KcllACp) 


(ContentID II 
TransactionIDII ACm) 11 
KcllACp 


Lic_Reg 


Encryption 


E( KPmcy, (ContentIDI I 

TransactionIDII 

ACm)IIKcllACp) 


Card 


Kmx 


KPmx 


KPa 


C(Ka,KPmcxllImcx) 


CRL 


License table 



If the invalid flag is Olh, 
then the process terminates 
by error. 


]JcReg 


CMP_Reg 


Send CRL only 
when CRL 
Update is older 
than this. 



Log 





Ks2 

TransactionID 

Off 
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12 State Transition Diagram 

12.1 Overall flow 



Fig. 12. 1 Transition of overall condition 
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12.2 Certificate Verification Routine 



Fig. 12. 2 Certificate verification 


CONFIDENTIAL 


DO NOT COPY ©Copyright 2000 by the 5 companies identified on page i, All rights reserved. _ 

- 43 - MultiMediaCard Application Note © June 2000 MMCA 












Keitaide-Music Technical Specification 


12.3 Playback Routine 


Playback Routine 
Start 

--s 

Receive Ks6 

do/DECRYPT,2h 


[Verification Error]/Reject 


" IllJcgalSequ en cej/R ejec t _ 
[Decrypt Error]/Reject 


[Normal] 


Read License 


do/READ SECURE 


[Normal] 


Output License 


do/ENCRYPT,2h 


[Illegal Sequence [/Reject i 
[Address EiTorl/Reject k ! 


JHJegalS equence 1/Rcject^j 
[License^ ErrorJ/Reject _ 


[Normal]/Output License 


Set Block Length 


do/SET_BLOCKLEN 


Set Block Count 


do/SET_BLOCK 
COUNT,cnt=n 


Output Content 


do/READ_SINGLE 

BLOCK 


[Normal]/Output Content 


/Set,Ext_Status(23) 

/Set,Ext_Status(28) 

/Set,Ext_Status(31) 

/Set,Ext_Status(28) 

/Set,Ext_Status(27) 

/Set,Ext_Status(28) 

/Set,Ext_Status(25) 


r 

1 


r ' 


Normal End 


Error End 


l_ 

_ J 


C_ 

. 


Fig. 12. 3 PlaybacK 
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12.4 Transfer Read Routine 


Transfer Read 
Routine Start 


[Normal License Only] 


[Normal Content & License] 
/Output Ksl s- 


Set Block Length 


do/SET_BLOCKLEN 


Set Block Count 


do/SET_BLOCK 
COUNT,cnt=n 


Output Content 


do/READ_SINGLE| 
_BLOCK 


Receive Ks2 


[Normal]/Output Content 

[Verification En‘or]/Reject 


do/DECRYPT,3h 


[Normal] 


Read License 


do/READ_SECURE 


[Illegal Sequencej/Rcjcct^l 
JDecrypt EjiqiJ/Reject _ 


[Illegal Sequence]/Reject 

- p 

[Address Errorj/Reject 


[Normal] 


Output License 


do/ENCRYPT,3h 


[Illegal Sequence]/Reject 
- 

JLicense_Errorj/Reject _ ^ 


[Normal]/Output License 


/Set,Ext_Status(23) 
/Set,Ext_Status(28) 
/Set,Ext_Status(31) 

/Set,Ext_Status(28) 

/Set,Ext_Status(27) 


/Set,Ext_Status(28) 

/Set,Ext_Status(24) 


r 



f 


Normal End 


Error End 


l _ 

_> 


v_ 

_. 


Fig. 12. 4 Transfer read 
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12.5 Download/Transfer Write/Download Retry Route 


Download Retry 
Routine Start 
(Charging has been 
already made) 


/Set,Ext_Status(28) 

[Illegal Sequence}— 
/Reject 


Download Retry 
Routine Start 
(Charging has not 
been already made 
yet) 


Download & 
Transfer Write 
..Routine. .Start_ 



r Output Certificate 

do/READ_CERT 
.Cert No. 

V___/ 


-► 



/Set,Ext_Status(22) 
or Ext_Status(20) 


J1I] a I S' - rL.No.J/_Rcject_ 


Receive Ksl 


do/DECRYPT,4h 


[Normal License Onlyl 


/Set,Ext_Status(28) 
[Illegal Sequence!— 


[Normal] 


Reject 


Search Log 


do/CHECK LOG 


/Set,Ext_Status(28) 
[Illegal Sequence 
(Reject 


[Normal] 


Output Log 


do/GET_LOG 


[Normal]/Output Log 


Receive Ksl 


/Set,Ext_Status(28) 
[Illegal Sequencel/Rejec^| 

JDecrypt Ejiqij/Reject _ _p 
/Set,Ext_Status(31) 
^[Normal Content & License] 


do/DECRYPT,Oh 


Set Block Count 


do/SET_BLOCK 

COUNT,len=n 


Output Content 


do/R EA D_S INGLE 
BLOCK 


Generate Ks2 


do/ENCRYPT,0 


[Normal]/Output Content 

/Set,Ext_Status(28) 
[Illegal Sequencel/Rejec^| 


[Normal]/Output Ks2 


Decrypt License 


do/DECRYPT,lh 


[Normal] 


Write License 


do/WRITE SEURE 


/Set,Ext_Status(28) 
[Illegal Sequence]/RejecL | 

JDecrypt EjrqrJ/Reject _ , 
/Set,Ext_Status(3lL 

/Set,Ext_Status(28) 
[Illegal Sequence j/Reject^| 
J Address _Errqr]/Reject_ 


[Normal] 


/Set,Ext_Status(27) 


>: 

i 


r 


i 

1 

r 


Normal End 

1 

1 

1 

Error End 


l 


1 

1 

_ 

. 


Fig. 12. 5 Download/transfer write/transfer retry download 
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13 State Transition Table 

Table 13.1 Overall configuration 




Table 13.3 Playback 



BLK_LEN 

BLK_CNi 

0_CNT 

NOR_E 

ERR_E 

Set Block 

Set Block 

Output 

Normal 

Error 

Length 

Count 

Contnt 

End 

End 


- 

- 
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Event 


Normal_L&C 


Normal 


Verification Erro 


T_R 

CHK_STATE 

BLK_LEN 

BLK_CNT 

0_CNT 

Transfer 

Read 

Check 

Confirmation 

Set Block 

Set Block 

Output 

Routine 

Bit 

Length 

Count 

Content 







ESigsgMCSim 

[WMlai]«aiaa;«ll 

Receive 

Ks2 

Read 

License 

Output 

License 

Normal 

End 

Error 

End 


■■■ 





ERR E 


Table 13.5 Download/transfer write 
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14 Mechanical Specification & Pin Assignment 

14.1 Standard Version Card 


Fig. 14.1 shows the appearance of the card (standard version). 

Unit: mm 


II | I T Mo 21 



Fig. 14.1 Card appearance (standard version) 


Fig.14.2 shows the standard-version pin assignment. 


Normal Mode 


Pin # 

MMC Mode 

SPI Mode 

1 

NC/DAT( 1) 

CS 

2 

CMD 

DI(0) 

3 

Vss 

Vss 

4 

Vdd 

Vdd 

5 

CLK 

CLK 

6 

Vss 

Vss 

7 

DAT(0) 

DO/DI(7) 



Fig. 14.2 Pin assignment (standard version) 
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14.2 High-speed Version Card 

Fig. 14. 3 shows the appearance of high-speed version card. 



Fig. 14.3 Card appearance (high-speed version) 
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Fig.14.4 shows a pin assignment of the high-speed version card. 


Normal Write Mode / Byte Write Mode 


Pin # 

MMC Mode 

SPI Mode 

1 

NC/DAT( 1) 

CS 

2 

CM D 

DI(0) 

3 

Vss 

Vss 

4 

Vdd 

Vdd 

5 

CL K 

CLK 

6 

Vss 

Vss 

7 

DAT(0) 

DO/DId) 

8 

NC/DAT( 2) 

NC/DI(2) 

9 

NC/DAT( 3) 

NC/DI(3) 

10 

NC/DAT( 4) 

NC/DI(4) 

11 

NC/DAT( 5) 

NC/DI(5) 

12 

NC/DAT( 6) 

NC/DI(6) 

13 

NC/DAT( 7) 

NC/DI(7) 



Fig.14.4 Pin assignment (high-speed version) 
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15 Read Only Memory Type Profiles 

In preceding sections, basically, description has been made on the memory card that uses flash memory for a 
content storage medium. This section prescribes the case in which ROM is used for the content storage medium. 
In such event, it is possible to classify the card to several types by using ROM for configuration of license control 
area or reloadable nonvolatile storage. 

First one is the card that carries out unlimited playback only. In this case, ROM is able to be used for storing the 
information concerning the license inside the card. The second one is a type in which the license information is 
configured with nonvolatile storage. In this kind of memory card, it is possible to support playback frequency 
restricting function, move function, and download function of license for existing content. The download function 
of the license for existing content is required when the user hopes to further purchase the license of the same 
piece of music with the memory card that is sold with the content only stored but the license not attached. And, 
the memory card is unable to play because the limited playback count has reached the specified value, or from 
which the license has been moved, then the download function is required too. 


Table 15. 1 Support function correspondence table 


Item 


Reproduction 

(No limit) 

Reproduction (able 

to be limited) 

C = B function + 

move 

D = B function + 

download-retry 


SWITCH 

- 

- 

- 

- 


SET_BLOCK_COUNT 

o 

o 

o 

O 


SEND_EXT_CSD 

o 

o 

o 

O 


ENCRYPT,Type = 0 

X 

X 

X 

o 


ENCRYPT,Type=l 

o 

o 

o 

o 


ENCRYPT,Type = 2 

o 

o 

o 

o 


ENCRYPT.Type = 3 

X 

X 

o 

X 


GET_LOG,Type = 80h 

X 

X 

X 

o 

Command 

GET_LOG,Type = 81h 

X 

X 

X 

o 


READ_CERT 

X 

X 

X 

o 


WRITE_SECURE 

X 

X 

X 

o 


READ_SECURE 

o 

o 

o 

o 


DECRYPT,Type = 0 

X 

X 

X 

o 


DECRYPT,Type=l 

X 

X 

X 

o 


DECRYPT,Type = 2 

o 

o 

o 

° 


DECRYPT,Type = 3 

X 

X 

o 

X 


DECRYPT,Type = 4 

X 

X 

X 

o i 


CHECK.LOG 

X 

X 

X 

o 


C HE C K_C ERT 

o 

o 

o 

o 

License 

Acm(Play_Count) 

FFh fixed 

Update enabled 

Update enabled 

Update enabled 

control 

Acm(Move_Count) 

OOh fixed 

OOh fixed 

Jpdate enabled (* 

OOh fixed 

area 

Invalid Flag 

OOh fixed 

Update enabled 

Update enabled 

Update enabled 

Log 

Not required 

Not required 

Required 

Required 

CRL 

Fixed value 

Fixed value 

Fixed value 

Update enabled 


Update enabled(*): Update enabled should be chosen when copy is able to be made freely. 


No need to support. 

X: No need to support (may be supported because it is not inhibited. ) 
O: Need to support. 
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